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Intellectual Property Rights 



IPRs essential or potentially essential to the present document may have been declared to ETSI. The information 
pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found 
in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in 
respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web 
server ( http://webapp.etsi.org/IPR/home.asp ). 

Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee 
can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web 
server) which are, or may be, or may become, essential to the present document. 



Foreword 

This Technical Specification (TS) has been produced by ETSI Project Smart Card Platform (SCP). 

The present document details the stage 1 aspects (overall service description) for the support of a "Application 
Programming Interface and Loader Requirements" [11]. 

The contents of the present document are subject to continuing work within EP SCP and may change following formal 
EP SCP approval. If EP SCP decide to modify the contents of the present document, it will be re-released by EP SPC 
with an identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to EP SCP for information; 

2 presented to EP SCP for approval; 

3 or greater indicates EP SCP approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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Scope 



The present document defines the stage two description of the "Apphcation Programming Interface and Loader 
Requirements" [11] internal to the UICC. 

This stage two describes the functional capabilities and the information flow for the UICC API implemented on the 
Java Card™ 2.2.1 specification [2], [3] and [4]. 

The present document includes information applicable to network operators, service providers and UICC, server and 
database manufacturers. 



References 



The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication and/or edition number or version number) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. 

Referenced documents which are not found to be publicly available in the expected location might be found at 
http://docbox.etsi.org/Reference . 

[I] ISO/IEC 7816-3 (1997): "Information technology - Identification cards - Integrated circuit(s) cards 
with contacts - Part 3: Electronic signals and transmission protocols". 

[2] Sun Microsystems Java Card'"^ Specification: "Java Card'"^ 2.2.1 Application Programming 

Interface". 

[3] Sun Microsystems Java Card^^^ Specification: "Java Card"""^ 2.2.1 Runtime Environment (JCRE) 

Specification". 

[4] Sun Microsystems Java Card'"*^ Specification: "Java Card'^^ 2.2.1 Virtual Machine Specification". 

NOTE: SUN Java Card Specifications can be downloaded at http://iava.sun.com/products/iavacard 

[5] ETSI TS 101 220: "Smart Cards; ETSI numbering system for telecommunication application 

providers (Release 6)". 

[6] ETSI TS 102 221: "Smart cards; UICC-Terminal interface; Physical and logical characteristics 

(Releasee)". 

[7] ETSI TS 102 223: "Smart cai'ds; Card Apphcation Toolkit (CAT) (Release 6)". 

[8] ETSI TS 102 222: "Integrated Circuit Cards (ICC); Administrative commands for 

telecommunications apphcations (Release 6)". 

[9] ETSI TS 102 225: "Smart Cards; Secured packet structure for UICC based applications 

(Releasee)". 

[10] ETSI TS 102 226: "Smart Cards; Remote APDU structure for UICC based applications 

(Releasee)". 

[II] ETSI TS 102 240: "Smart Cards; UICC Application Programming Interface and Loader 
Requirements; Service description (Release 6)". 

[12] ETSI TS 123 040: "Digital cellular telecommunications system (Phase 2+); Universal Mobile 

Telecommunications System (UMTS); Technical realization of Short Message Service (SMS) 
(3GPP TS 23.040)". 
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Definitions and abbreviations 



3.1 Definitions 

For the purposes of the present document, the following terms and definitions apply: 

applet: application built up using a number of classes which will run under the control of the Java Card virtual machine 

bytecode: machine independent code generated by a Java compiler and executed by the Java interpreter 

class: type that defines the implementation of a particular kind of object 

NOTE: A Class definition defines instance and class variables and methods. 

framework: defines a set of Application Programming Interface (API) classes for developing applications and for 
providing system services to those applications 

Java: object oriented programming language developed by Sun Microsystems designed to be platform independent 

method: piece of executable code that can be invoked, possibly passing it certain values as arguments 

NOTE: Every Method definition belongs to some class. 
object: principal building block of object oriented programs 

NOTE: Each object is a programming unit consisting of data (variables) and functionality (methods). 
package: group of classes 

NOTE: Packages are declared when writing a Java Card program. 

toolkit application: application on the UICC card which can be triggered by toolkit events issued by the Terminal and 
which can send proactive commands to the terminal 

NOTE: These applications can be downloaded via any type of network. 

virtual machine: part of the Run-time environment responsible for interpreting the bytecode 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 

AID Application IDentifier 

APDU Application Protocol Data Unit 

API Application Programming Interface 

FES For Further Study 

JCRE Java Card^"^ Runtime Environment 

NAA Network Access Application (e.g. SIM, USIM) 



Description 



The present document describes an API and a Runtime Environment for the UICC platform. This API and the Runtime 
Environment allows application programmers to get access to the functions and data described in TS 102 221 [6] and 
TS 102 223 [7] such that UICC based services can be developed and loaded onto a UICC, quickly and, if necessarily, 
remotely, after the card has been issued. 

This API is an extension to the "Java Card'"^ 2.2.1 API" [2], the Runtime Environment is an extension of the "Java 
Card™ 2.2.1 Runtime Environment" [3]. 
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4.1 



UICC Java Card architecture 



The over all architecture of the UICC API is based on Java Card™ 2.2.1 [2], [3] and [4]: 

. I 



UICC File 

System 
Server 



102 221 based 
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(e.g. SIM 
Applet or 
USIM Applet) 

ADF File 
System Server 



Java Card 
Packages 



UICC. access 
package 



Java Card Runtime Environment 



Other 

Applications 
not based on 
102 221 



Toolkit Applet 

(e.g. Toolkit 

service, 

Remote 

Management 

Applications, 

Browser 

Applications) 



uicc. toolkit 
package 



UICC. system 
package 



CAT Runtime Environment 



Toolkit 
Handlers 



Toolkit 
Registry 



Triggering 
Entity 



Items that are defined in this specification 



Figure 1 : UICC Java Card™ architecture 

Java Card^^ Runtime Environment: this is specified in "Java CardT*^ 2.2.1 Runtime Environment (JCRE) 
Specification" [3] and is able to select any specific applet and transmit to it the process of its APDU. 

CAT Runtime Environment: this is the CAT Runtime Environment composed of , the Toolkit Registry, the Toolkit 
Handlers and the Triggering Entity. It is an addition to the JCRE. 

Toolkit Registry: this is handling all the registration information of the Toolkit Applets, and their link to the JCRE 
registry. 

Toolkit Handlers: this is handling the availability of the system handler and the toolkit protocol (i.e. Toolkit Applet 
suspension). 

UICC File System Server: it contains the File System of the UICC specified in TS 102 221 [6] (i.e. the EF and DF 
under the MF). 

ADF File System Server: it contains the files of an ADF as specified in TS 102 221 [6] (i.e. the EF and DF under the 
ADF). 

Applets: these derive from javacard.framework.Applet and provide the entry points: process, select, deselect, install as 
defined in the "Java Card'"*^ 2.2.1 Runtime Environment Specification" [3]. 

Toolkit Applets: are the Java Card based implementation of Toolkit Applications, these derive from 
javacard.framework.Applet, to provide the same entry points, and provide one object implementing the 
uicc.toolkit.Toolkitlnterface interface, so that these applets can be triggered by an invocation of the processToolkit() 
method. The Toolkit Applet(s) AID are defined in TS 101 220 [5]. 

Remote Application Management Application: this is handling the loading, installation, management and removal of 
applets and packages as specified in TS 102 226 [10]. 
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Shareable interface: this is defined in the Java Card^'^ 2.2.1 specifications [2], [3] and [4]. 

CAT session: card session opened by a terminal supporting proactive UICC, starting with the download of the 
Terminal Profile and ending with a subsequent reset or deactivation of the card. 



5 File access API 

The file access API consists of the uicc.access package, which allows applets to access the file systems of the UICC. 



5.1 FileView objects 
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Figure 2: Logical structure of FileView 

Any Applet (not only Toolkit Applets) is allowed to retrieve and use a FileView. 

A FileView object can be retrieved by invoking one of the getTheFileView() methods defined in the UlCCSystem class. 

The UICC FileView allows to access the MF and all DFs and EFs that are located under the MF, including DF Telecom 
and any access technology specific DF located under the MF, but not the files located under any ADF. This FileView 
can be retrieved by invoking the getTheFileView() method from the UlCCSystem. The only way to access the DF GSM 
is to request the UICC FileView. 

An ADF FileView allows to access only the DFs and EFs located under the ADF. It is not possible to access the MF or 
any DF or EF located under the MF from an ADF FileView. An ADF FileView can be retrieved by invoking the 
getTheFileView( . . . ) method with passing as parameter the full AID of the application owning the ADF. 

Each FileView object shall be provided as a permanent JCRE entry point object. 

A separate and independent file context shall be associated with each and every FileView object: the operation 
performed on files in a given FileView object shall not affect the file context associated with any other FileView object. 

This context can be transient or persistent depending on what was required by the Applet during the creation of the 
FileView object. 

Each FileView shall be given the access control privileges associated with the UICC or the corresponding ADF for the 
Applet. The access control privileges are defined by the access domain parameters specified in TS 102 226 [10]. The 
access control privileges are verified against the access rules defined in TS 102 221 [6] each time a method of the 
FileView object is invoked. 

The root of the context of a FileView object is the MF for the UICC FileView or the ADF for an ADF FileView. 

At the creation of a FileView object, the current DF of the File View's context is the root. When the transient context of a 
FileView is cleared, the current DF becomes the root of the FileView. 
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5.2 FileView operations 



The following functions are provided by the methods defined in the uicc. access. FileView interface see annex A: 

• ACTIVATE FILE as defined in TS 102 222 [8]. 

• DEACTIVATE FILE as defined in TS 102 222 [8]. 

• INCREASE as defined in TS 1 02 22 1 [6] . 

• READ BINARY as defined in TS 102 221 [6]. 

• READ RECORD as defined in TS 102 221 [6]. 

• SEARCH RECORD as defined in TS 102 221 [6]. 

• SELECT by File ID or by Path as defined in TS 1 02 22 1 [6] . 

• STATUS as defined in TS 102 221 [6]. 

• UPDATE BINARY as defined in TS 1 02 22 1 [6] . 

• UPDATE RECORD as defined in TS 102 221 [6]. 



6 Toolkit API and CAT Runtime Environment 

The toolkit API consists of the uicc. toolkit package, which allows applets to access the toolkit features defined in 
TS 102 223 [7]. 



6.1 Applet triggering 



The application triggering portion of the CAT Runtime Environmentis responsible for the activation of Toolkit Applets, 
based on the APDU received by the UICC. 
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Figure 3: Toolkit Applet triggering diagram 

The Translator converts the information from an incoming APDU into the corresponding Event information. 

The Triggering Entity requests the information from the Toolkit Registry, which Toolkit Applets are registered to this 
Event. The Triggering Entity then triggers the Toolkit Applet. The terminal shall not be adversely affected by the 
presence of applets on the UICC card. For instance a syntactically correct Envelope shall not result in an error status 
word in case of a failure of an applet. The applications seen by the terminal are first level applications (e.g. SIM, 
USIM). 

The difference between a Java Card^"^ applet and a Toolkit Applet is that the latter does not handle APDUs directly. It 
will handle higher-level messages. Furthermore the execution of a method could span over multiple APDUs, in 
particular, the proactive protocol commands (Fetch, Terminal Response). 

As written above, when a first level application is the selected application and when a Toolkit Applet is triggered the 
selectO method of the Toolkit Applet shall not be launched since the Toolkit Applet itself is not selected. 



£75/ 



Release 6 11 ETSI TS 102 241 V6.4.1 (2005-04) 

The CAT Runtime Environment shall only trigger a Toolkit Applet if it is in the selectable state as defined in 
TS 102 226 [10]. 

The CAT Runtime Environment shall trigger the Toolkit Applets according to their priority level assigned at installation 
time. The priority level specifies the order of activation of an applet compared to the other applets registered to the same 
event. If two or more applets are registered to the same event and have the same priority level, the applets are triggered 
according to their installation time (i.e. the most recent applet is activated first). TS 102 226 [10] defined the priority 
level coding and how this parameter is provided to the UICC. 

When the CAT Runtime Environment has to trigger several applets on the same event, the next applet is triggered on 
the return of the processToolkit() method of the previous Toolkit Applet. 

6.1.1 Exception Handling 

A Toolkit Applet may throw an exception or an exception can occur during its processing. The CAT Runtime 
Environment shall catch any exception type or class and process as described here after; 

If more than one Applet shall be triggered by the currently processed event all Exceptions shall be caught by the CAT 
Runtime Environment and shall not be sent to the terminal. The CAT Runtime Environment shall proceed with the 
triggering. 

If only one Applet shall be triggered by the currently processed event and an ISOException with the following reason 
code is thrown it shall be sent to the terminal: 

• ISOException with reason code REPLY_BUSY (0x9300). 

Other Exceptions shall not be propagated to the terminal, this behaviour may be extended by an access technology 
depended specification. 
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6.2 



Definition of events 



The following events can trigger a Toolkit Applet: 



Table 1 : UICC toolkit event list 



Event Name 


Reserved short value 


Not to be used 





EVENT PROFILE DOWNLOAD 


1 


Reserved by 3GPP 


2 


Reserved by 3GPP 


3 


Reserved by 3GPP 


4 


Reserved by 3GPP 


5 


Reserved by 3GPP 


6 


EVENT MENU SELECTION 


7 


EVENT MENU SELECTION HELP REQUEST 


8 


EVENT CALL CONTROL BY NAA 


9 


Reserved by 3GPP 


10 


EVENT TIMER EXPIRATION 


11 


EVENT EVENT DOWNLOAD MT CALL 


12 


EVENT EVENT DOWNLOAD CALL CONNECTED 


13 


EVENT EVENT DOWNLOAD CALL DISCONNECTED 


14 


EVENT EVENT DOWNLOAD LOCATION STATUS 


15 


EVENT EVENT DOWNLOAD USER ACTIVITY 


16 


EVENT EVENT DOWNLOAD IDLE SCREEN AVAILABLE 


17 


EVENT EVENT DOWNLOAD CARD READER STATUS 


18 


EVENT STATUS COMMAND 


19 


EVENT EVENT DOWNLOAD LANGUAGE SELECTION 


20 


EVENT EVENT DOWNLOAD BROWSER TERMINATION 


21 


EVENT EVENT DOWNLOAD DATA AVAILABLE 


22 


EVENT EVENT DOWNLOAD CHANNEL STATUS 


23 


Reserved by 3GPP 


24 


EVENT EVENT DOWNLOAD ACCESS TECHNOLOGY CHANGE 


25 


EVENT EVENT DOWNLOAD DISPLAY PARAMETER CHANGED 


26 


EVENT EVENT DOWNLOAD LOCAL CONNECTION 


27 


EVENT EVENT DOWNLOAD NETWORK SEARCH MODE CHANGE 


28 


EVENT EVENT DOWNLOAD BROWSING STATUS 


29 


RFU 


30 to 122 


EVENT PROACTIVE HANDLER AVAILABLE 


123 


EVENT EXTERNAL FILE UPDATE 


124 


RFU 


125 


EVENT APPLICATION DESELECT 


126 


EVENT FIRST COMMAND AFTER ATR 


127 


RFU 


128 to 32 767 


EVENT UNRECOGNIZED ENVELOPE 


-1 


Reserved for Proprietary Use: 

range for Card manufacturer proprietary events 
range for Card Issuer proprietary events 


2 to -64 
-65 to -128 


RFU 


-129 to -32768 



EVENT_PROFILE_DOWNLOAD 

Upon reception of a TERMINAL PROFILE APDU command as defined in TS 102 221 [6] the CAT Runtime 
Environment shall store the terminal profile and trigger all the Toolkit Applet(s) registered to this event. 

EVENT_MENU_SELECTION,EVENT_MENU_SELECTION_HELP_REQUEST 

Upon reception of an ENVELOPE (MENU SELECTION) APDU command as defined in TS 102 221 [6] the 
CAT Runtime Environment shall only trigger the Toolkit Applet registered to the corresponding event with the 
associated menu identifier. 

A Toolkit Applet shall be triggered by the EVENT_MENU_SELECTION_HELP_REQUEST event only if 
help is available for the corresponding Menu entry. 
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EVENT_CALL_CONTROL_BY_NAA 

Upon reception of an ENVELOPE (CALL CONTROL) APDU command as defined in TS 102 221 [6] the 
CAT Runtime Environment shall trigger the Toolkit Applet registered to this event. Regardless of the Toolkit 
Applet state the CAT Runtime Environment shall not allow more than one Toolkit Applet to be registered to 
this event at a time, in particular, if a Toolkit Applet is registered to this event but not in selectable state the 
CAT Runtime Environment shall not allow another Toolkit Applet to register to this event. 

EVENT_TIMER_EXPIRATION 

Upon reception of an ENVELOPE (TIMER EXPIRATION) APDU command as defined in TS 102 221 [6] the 
CAT Runtime Environment shall only trigger the Toolkit Applet registered to this event with the associated 
timer identifier. 

EVENT_EVENT_DOWNLOAD_MT_CALL 

EVENT_EVENT_DOWNLOAD_CALL_CONNECTED 

EVENT_EVENT_DOWNLOAD_CALL_DISCONNECTED 

EVENT_EVENT_DOWNLOAD_LOCATION_STATUS 

EVENT_EVENT_DOWNLOAD_USER_ACTIVITY 

EVENT_EVENT_DOWNLOAD_IDLE_SCREEN_AVAILABLE 

EVENT_EVENT_DOWNLOAD_CARD_READER_STATUS 

EVENT_EVENT_DOWNLOAD_LANGUAGE_SELECTION 

EVENT_EVENT_DOWNLOAD_BROWSER_TERMINATION 

EVENT_EVENT_DOWNLOAD_ACCESS_TECHNOLOGY_CHANGE 

EVENT_EVENT_DOWNLOAD_DISPLAY_PARAMETER_CHANGED 

EVENT_EVENT_DOWNLOAD_NETWORK_SEARCH_MODE_CHANGE 

EVENT_EVENT_DOWNLOAD_BROWSING_STATUS 

Upon reception of an ENVELOPE (Event Download) APDU command as defined in TS 102 221 [6] the CAT 
Runtime Environment shall trigger all the Toolkit Applets registered to the corresponding event. 

EVENT_EVENT_DOWNLOAD_LOCAL_CONNECTION 

Upon reception of an ENVELOPE (DOWNLOAD LOCAL CONNECTION) APDU as defined in 

TS 102 221 [6] command the CAT Runtime Environment shall only trigger the Toolkit Applet registered to 

this event with the associated service identifier. 

The registration to this event is effective once the Toolkit Applet has issued a successful DECLARE 
SERVICE (add) proactive command, and is valid until the first successful DECLARE SERVICE (delete) with 
the corresponding service identifier, or the end of the card session. 

EVENT_EVENT_DOWNLOAD_DATA_AVAILABLE 

EVENT_EVENT_DOWNLOAD_CHANNEL_STATUS 

Upon reception of an ENVELOPE (Event Download) APDU command as defined in TS 102 221 [6] the CAT 
Runtime Environment shall only trigger the Toolkit Applet registered to the corresponding event with the 
associated channel identifier. 

The registration to these events is effective once the Toolkit Applet has issued a successful OPEN CHANNEL 
proactive command, and is valid until the first successful CLOSE CHANNEL with the corresponding channel 
identifier, or the end of the card session. 
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When a Toolkit Applet sends an OPEN CHANNEL proactive command and receives a TERMINAL 
RESPONSE with General Result = "OxOX", the CAT Runtime Environment shall assign the channel identifier 
to the calling Toolkit Applet. 

When a Toolkit Applet sends a CLOSE CHANNEL proactive command and receives a TERMINAL 
RESPONSE with General Result ="OxOX", the CAT Runtime Environment shall release the corresponding 
channel identifier. 

EVENT_STA TUS_COMMAND 

Upon reception of an STATUS APDU command as defined in TS 102 221 [6] the CAT Runtime Environment 
shall trigger all the Toolkit Applet(s) registered to this event. 

EVENT_APPLICA TION_DESELECT 

When an application session is terminated (as described in TS 102 221 [6]) the CAT Runtime Environment 
shall trigger all the Toolkit Applets registered to this event. The AID of the deselected application is available 
to the Toolkit Applet in the EnvelopeHandler, as an AID Simple TLV data object as defined in the 
TS 102 223 [7]. 

The ProactiveHandler is not available for triggered Toolkit Applets during the processing of this event. 

EVENT_FIRST_COMMAND_AFTER_ATR 

Upon reception of the first APDU after the ATR and before the Status Word of the processed command has 
been sent back by the UICC, the CAT Runtime Environment shall trigger all the Toolkit Applet(s) registered 
to this event. 

If the first APDU received is a Toolkit Applet triggering APDU (e.g. TERMINAL PROFILE), the Toolkit 
Applets registered to the EVENT_FIRST_COMMAND_AFTER_ATR event shall be triggered first. 

The ProactiveHandler shall not be available at the invocation of the processTooIkit method of the Toolkit 
Applet on the EVENT_FIRST_COMMAND_AFTER_ATR event. 

EVENT_UNRECOGNIZED_ENVELOPE 

Upon reception of an unrecognized ENVELOPE APDU command as defined in TS 102 221 [6] the CAT 
Runtime Environment shall trigger all the Toolkit Applet(s) registered to this event. 

An ENVELOPE APDU command shall be considered as unrecognized by the CAT Runtime Environment if 
its BER-TLV tag is not defined in the ToolkitConstants interface or if the BER-TLV tag is reserved for 
GSM/3G/3GPP2 in TS 101 220 [5]. The EVENT_UNRECOGNIZED_ENVELOPE event allows a Toolkit 
Applet to handle the evolution of the TS 102 223 [7] specification. 

As a consequence of the EnvelopeResponseHandler availability rules specified in clause 6.6, only the first triggered 
Toolkit Applet is guaranteed to be able to post a response. 

EVENT_PROACTIVE_HANDLER_AVAILABLE 

The CAT Runtime Environment shall trigger all the Toolkit Applets registered to this event when the 
ProactiveHandler is available and all the Toolkit Applets registered to the previous event have been triggered 
and have returned from the processToolkit() invocation. 

When the Toolkit Applets is triggered it is automatically deregistered by the CAT Runtime Environment. 

NOTE: When the Toolkit Applet is triggered the handlers' availability and content can be different from the 

content at the registration time. Therefore, the Toolkit Applet has to store any handler data in order to use 
it in this event. 

EVENT_EXTERNAL_FILE_UPDA TE 

Upon successful execution of an UPDATE BINARY or UPDATE RECORD or INCREASE APDU command (sent by 
the Terminal and received by the UICC on the I/O line) as defined in TS 102 221 [6], the CAT Runtime Environment 
shall trigger all the Toolkit Applets reistered to this event with the associated updated file. An Applet shall only be 
triggered once per command. 
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When an applet is triggered by the EVENT_EXTERNAL_FILE_UPDATE event, the system Envelope Handler shall be 
made available, and shall contains the following COMPREHENSION TLVs (the order of the TLVs given in the system 
EnvelopeHandler is not specified): 

• Device Identity with source set to terminal and destination set to UICC, as defined in TS 102 223 [7]; 



• 



• 



File List, as defined in TS 102 223 [7]. The number of files shall be set to one. If a SFI referencing is used in 
the APDU Command, it shall be converted to its File Identifier; 

AID of the ADF, as defined in TS 102 223 [7], if the updated file belongs to an ADF. In this case, the path 
'3F007FFF' given in the File List indicates the ADF of the UICC application given through the AID. If the 
updated file belongs to the UICC shared file system, the AID TLV object is not present; 

File Update Information object. 



Byte(s) 


Description 


Length 


1 


File Update Information tag 


1 


2 


Length = 4 


1 


3 to 4 


Position 


2 


5 to 6 


Number of bytes updated 


2 



Position depends on the file type: 

In case of transparent file. Position = Offset 

In case of record file. Position = Absolute Record number 

For the INCREASE APDU, the number of bytes updated is the record length. 

The value returned upon a getBERTagO method invocation shall be equal to the BER-TLV tag for intra-UICC 
communication, as defined in TS 101 220 [5]; 

The registration to this event is effective once the applet has successfully called the method registerFileEvent(...). 

The deregistration for a particular file to this event is effective once the Applet has successfully called the method 
deregisterFileEvent(...). A call to the method c/eflr£'venf(EVENT_EXTERNALjlLE_UPDATE) clears the event 
EVENT_EXTERNAL^FILE_UPDATE from the Toolkit Registry of the Applet i.e. the Applet is no longer triggered when a 
file is updated. 



6.3 Registration 



A Toolkit Applet shall register to the JCRE as specified in "Java Card^"^ 2.2.1 Runtime Environment (JCRE) 
Specification" [3]. 

A Toolkit Applet shall register to the CAT Runtime Environment, by calling the ToolkitRegistrySystem.getEntryO 
method. A Toolkit Applet can change its registration to toolkit events during its whole life cycle. 

The registration of a Toolkit Applet to an event shall not be affected by its life cycle state, in particular a Toolkit Applet 
shall still be considered as registered to an event if it is not in the selectable life cycle state. 

The toolkit events registration API is described in the uicc.toolkit.ToolkitRegistry interface in annex A. 



6.4 Proactive command handling 



The CAT Runtime Environment is in charge of managing the toolkit protocol for the Toolkit Applet(s) (i.e. 91xx, Fetch, 
Terminal Response). 

The uicc.toolkit.ProactiveHandler API defines the methods made available to Toolkit Applets by the CAT Runtime 
Environment so that the Toolkit Applets can: 

• initialize a proactive command with the init() method; 
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• 



• 



append several Simple TLV as defined in TS 102 223 [7] to the proactive command with the appendTLV() 
methods; 

request the CAT Runtime Environment to send this proactive command to the terminal and wait for the 
response, with the send() method. 



On the call to the send() method the CAT Runtime Environment shall handle the transmission of the proactive 
command to the terminal, and the reception of the response. On the return from the send() method the CAT Runtime 
Environment shall resume the Toolkit Applet execution. It shall provide to the Toolkit Applet the 
uicc.toolkit.ProactiveResponseHandler, so that the Toolkit Applet can analyse the response. 

The CAT Runtime Environment shall prevent the Toolkit Applet from sending the following system proactive 
commands: SET UP MENU, SET UP EVENT LIST, POLL INTERVAL, POLLING OFF. If an applet attempts to send 
such a command, the CAT Runtime Environment shall throw an exception. 

The CAT Runtime Environment shall prevent a Toolkit Applet from sending a TIMER MANAGEMENT proactive 
command using a timer identifier, which is not allocated to it. If an applet attempts to send such a command, the CAT 
Runtime Environment shall throw an exception. 

The CAT Runtime Environment shall prevent a Toolkit Applet from sending a DECLARE SERVICE (add, delete) 
proactive command using a service identifier, which is not allocated to it. If an applet attempts to send such a command, 
the CAT Runtime Environment shall throw an exception. 

The CAT Runtime Environment shall prevent a Toolkit Applet from sending a SEND DATA, RECEIVE DATA and 
CLOSE CHANNEL proactive commands using a channel identifier, which is not allocated to it. If an applet attempts to 
send such a command the CAT Runtime Environment shall throw an exception. 

The CAT Runtime Environment shall prevent a Toolkit Applet from sending an OPEN CHANNEL proactive command 
if it exceeds the maximum number of channel allocated to this applet. If an applet attempts to send such a command the 
CAT Runtime Environment shall throw an exception. 

All other proactive commands shall be sent to the terminal as constructed by the Toolkit Applet without any check by 
the CAT Runtime Environment. 

The CAT Runtime Environment cannot guarantee if the SET UP IDLE MODE TEXT proactive command is used by a 
Toolkit Applet, that another Toolkit Applet will not overwrite this text at a later stage. 



6.5 Envelope response handling 



The uicc.toolkit.EnvelopeResponseHandler API defines the methods made available to Toolkit Applets by the CAT 
Runtime Environment so that the Toolkit Applets can send a response to some specific events, 
(e.g. EVENT_CALL_CONTROL). The COMPREHENSION-TLV list contained in the EnvelopeResponseHandler 
shall be sent as the response data of the ENVELOPE command. The Boolean parameter passed to the post() or 
postAsBERTLVO method shall be mapped by the CAT Runtime Environment to the correct status word, if the value is 
true it corresponds to a successful ending of the command status word "9000", if the value is false it corresponds to a 
warning status word "6200". An extension of the CAT Runtime Environment for a specific NAA can overwrite this 
mapping. 

A Toolkit Applet can post a response to some events with the post() or the postAsBERTLVO methods and can continue 
its processing after the call to these methods. 

The CAT Runtime Environment shall send the response before the emission of the next proactive command or when all 
the Toolkit Applets triggered by the event have finished their processing. 



6.6 System handler management 



The system handlers; ProactiveHandler, Proactive Re sponseHandler, EnvelopeHandler and EnvelopeResponseHandler 
are Temporary JCRE Entry Point Object as defined in the "Java Card'''^ 2.2.1 Runtime Environment (JCRE) 
Specification" [3]. 

A system handler is available if the exception ToolkitException. HANDLER_NOT_AVAILABLE is not thrown when 
the corresponding getTheHandler() method is called or a method of its interface is called. 
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A system handler shall not be available if the corresponding getTheHandler() method is not called, directly or 
indirectly, from the applet's processToolkitQ method. 

The following rules define the availability and the content of the system handlers. These are generic rules and may vary 
with the event that triggers the Toolkit Applet. 

ProactiveHandler: 

• The ProactiveHandler shall not be available if the Terminal Profile command has not yet been processed by 
the CAT Runtime Environment. 

• When available the ProactiveHandler shall remain available until the termination of the processToolkit() 
method. 

• If a proactive command is pending the ProactiveHandler may not be available. 

• At the processToolkitO method invocation the TLV-List is cleared. 

• At the call of its init method the content is cleared and then initialized. 

• After a call to ProactiveHandler. send() method the content of the handler shall not be modified by the CAT 
Runtime Environment. 

ProactiveResponseHandler: 

• The ProactiveResponseHandler shall be available as soon as the ProactiveHandler is available, its TLV list 
shall be empty before the first call to the ProactiveHandler. send() method. Shall remain available until the 
termination of the processToolkit() method. 

• The ProactiveResponseHandler shall not be available if the ProactiveHandler is not available. 

• The ProactiveResponseHandler TLV list is filled with the simple TLV data objects of the last TERMINAL 
RESPONSE APDU command. The simple TLV data objects shall be provided in the order given in the 
TERMINAL RESPONSE command data. 

• The ProactiveResponseHandler content shall be updated after each successful call to ProactiveHandler. send() 
method and shall remains unchanged until the next successful call to the ProactiveHandler. send() method. 

EnvelopeHandler: 

• When available (as specified in table 1) the EnvelopeHandler shall remain available and its content shall 
remain unchanged from the invocation to the termination of the processToolkit() method. 

• The EnvelopeHandler TLV hst is filled with the simple TLV data objects of the ENVELOPE APDU 
command. The simple TLV data objects shall be provided in the order given in the ENVELOPE command 
data. 

EnvelopeResponseHandler: 

• The EnvelopeResponseHandler is available (as specified in table 1) for all triggered Toolkit Applets, until a 
Toolkit Applet has posted an envelope response or sent a proactive command. 

• After a call to the post() method the handler is no longer available. 

• After the first invocation of the ProactiveHandler. send() method the EnvelopeResponseHandler is no more 
available. 

• At the processToolkitO method invocation the TLV-List is cleared. 

Table 2 describes the minimum availability of the handlers for all the events at the invocation of the processToolkitO 
method of the Toolkit Applet. 
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Table 2: Handler availability for each event 



EVENT 


Reply busy 

allowed (see 

note 2) 


Envelope 
Handler 


Envelope 
ResponseHandler 


Nb of triggered/ 
registered Applet 


MENU SELECTION 


Y 


Y 


N 


1/n (per Item Id) 


MENU SELECTION HELP REQUEST 


Y 


Y 


N 


1/n (per Item Id) 


CALL CONTROL BY NAA 


N 


Y 


Y 


1/1 


_TIMER_EXPIRATION 


Y 


Y 


N 


1/8 (per timer) 
(see note 1 ) 


EVENT DOWNLOAD 










MT CALL 


Y 


Y 


N 


n/n 


CALL CONNECTED 


Y 


Y 


N 


n/n 


CALL DISCONNECTED 


Y 


Y 


N 


n/n 


LOCATION STATUS 


Y 


Y 


N 


n/n 


USER ACTIVITY 


Y 


Y 


N 


n/n 


IDLE SCREEN AVAILABLE 


Y 


Y 


N 


n/n 


CARD READER STATUS 


Y 


Y 


N 


n/n 


LANGUAGE SELECTION 


Y 


Y 


N 


n/n 


BROWSER TERMINATION 


Y 


Y 


N 


n/n 


_DATA_AVAILABLE 


Y 


Y 


N 


1/7 (per channel) 
(see note 1 ) 


_CHANNEL_STATUS 


Y 


Y 


N 


1/7 (per channel) 
(see note 1 ) 


ACCESS TECHNOLOGY CHANGE 


Y 


Y 


N 


n/n 


DISPLAY PARAMETER CHANGE 
D 


Y 


Y 


N 


n/n 


_NETWORK_SEARCH_MODE_CHANGE 


Y 


Y 


N 


n/n 


_BROWSING_STATUS 


Y 


Y 


N 


n/n 


_LOCAL_CONNECTION 


Y 


Y 


N 


1/8 (per service 
identifier) (see note) 


UNRECOGNIZED ENVELOPE 


Y 


Y 


Y 


n/n 


STATUS COMMAND 


N 


N 


N 


n/n 


PROFILE DOWNLOAD 


N 


N 


N 


n/n 


PROACTIVE HANDLER AVAILABLE 


N 


N 


N 


n/n 


FIRST COMMAND AFTER ATR 


N 


N 


N 


n/n 


_EXTERNAL_FILE_UPDATE 


N 


Y 


N 


n/n 


NOTE 1 : One Toolkit Applet can register to several timers/channels/services identifier, but a timer/channel/services 

identifier can only be allocated to one Toolkit Tpplet. 
NOTE 2: It is recommended to use ISOException with reason code 0x9300 only for events where reply busy is 

allowed. 



6.7 



CAT Runtime Environment behaviour 



The following rules define the CAT Runtime Environment behaviour for: 

• Toolkitlnterface object retrieval: 

The CAT Runtime Environment shall invoke the getShareableInterfaceObject() method of the Toolkit 
Applet to retrieve the reference of its Toolkitlnterface object, before triggering it the first time in its life 
cycle. 

The AID parameter of the getShareableInterfaceObject() method shall be set to null. 

The byte parameter of the getShareableInterfaceObject() method shall be set to one (i.e. "01"). 

• Triggering of a Toolkit Applet (invocation of the processToolkit() method of the Toolkitlnterfaceohject): 

The CAT Runtime Environment triggers a Toolkit Applet by calling the processToolkit() method of the 
Toolkitlnterface shareable interface object provided by the Toolkit Applet. As a consequence all the rules 
defined in "Java Card'"^ 2.2.1 (JCRE) Runtime Environment Specification" [3] apply (e.g. access to 
CLEAR_ON_DESELECT transient objects, context switch, multi selectable). 
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At the invocation of the processToolkit() method there shall be no transaction in progress. 

The context as defined in Java Card shall be set to the context of the Toolkit Applet. The previous 
context (context of the caller) shall be the context of the CAT Runtime Environment. 

• Termination of a Toolkit Applet (return from the processToolkit() method): 

A pending Toolkit Applet transaction is aborted. 

• Invocation of ProactiveHandler.send() method: 

During the execution there might be other context switches, but at the return of the send() method the 
Toolkit Applet context is restored. 

A pending Toolkit Applet transaction at the method invocation is aborted. 

6.7.1 System proactive commands 

The system proactive command shall only contain information from Toolkit Applets that are in the selectable state. 

The CAT Runtime Environment shall send its system proactive command(s) as soon as no proactive session is ongoing 
and after all the Toolkit Applets registered to the current events have been triggered and have returned from the 
processToolkitQ method invocation. 

6.7.1.1 SET UP MENU 

At the beginning of a CAT session, the CAT Runtime Environment shall send a SET UP MENU system proactive 
command, if at least one menu entry is registered and enabled by a selectable Toolkit Applet. 

During a CAT session the CAT Runtime Environment shall send a SET UP MENU system proactive command 
whenever a menu entry is modified, added or removed or the EF^jjme ^^^^ under the DFjg^gQQjyj file is updated as 
defined in TS 102 222 [8]. 

If help is available for at least one Menu Entry inserted in the SET UP MENU system proactive command the CAT 
Runtime Environment shall indicate to the terminal that help information is available. 

If help is not available for all Menu Entries inserted in the SET UP MENU system proactive command the CAT 
Runtime Environment shall not indicate to the terminal that help information is available. 

The CAT Runtime Environment shall use the data of the EF^yjyfg file under the DF_Telecom when issuing the SET UP 
MENU proactive command. 

If a text attribute different from the default format is provided for at least one Menu Entry, the SET UP MENU system 
proactive command shall contain the item text attribute list Comprehension TLV. The default format as defined in 
TS 123 040 [12] is '00 00 03 90'. 

A Menu Entries' list is managed by the CAT Runtime Environment. The Menu Entries' list is a simple link list which is 
modified either when initMenuEntryO is successfully called or when an Applet is successfully deleted. The Menu 
Entries' list is managed regardless of the menu entry state (enable/disable) as well as regardless of the Toolkit Applet(s) 
life cycle state(e.g. Selectable/Locked, etc.). 

Each element of the list corresponds to an Item used by the CAT Runtime Environment to build and send the SET UP 
MENU system proactive command to the terminal. The CAT Runtime Environment shall provide the items to the 
terminal in the same order than in the Menu Entries' list (from the first element to the last element). 

The positions of the Toolkit Applet menu entries in the Menu Entries' list, the requested item identifiers and the 
associated limits (e.g. maximum length of item text string) are provided at the installation of the Toolkit Applet. 

• Item identifiers: The Item identifiers used in Item comprehension TLV of the SET UP MENU system 
proactive command are the ones returned by the initMenuEntry(...) method. The Item identifier values are split 
in two ranges. 

The range (1,127) of the item identifier is managed by the Remote Application Management Application 
(TS 102 226 [10]) and provided to the CAT Runtime Environment. 
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The range (128,255) is managed by the CAT Runtime Environment. When the requested item identifier 
is "00" the CAT Runtime Environment shall assign the first free value in the range (128,255). 

• Item position: The Item position of a Menu Entry indicates the position where the Menu Entry shall be inserted 
in the Menu Entries' list. 

If the new Menu Entry has to be inserted at an already occupied position, the entries from the requested 
position to the last element of the Menu Entries' list are shifted to the next positions. 

If the position indicated is greater than the number of elements in the Menu Entries' list, then the Menu 
Entry takes the last position in the Menu Entries' list. 

If the position indicated is equal to "00", then the Menu Entry takes the last position in the Menu Entries' 
list. 

6.7.1.2 SET UP EVENT LIST 

At the beginning of a CAT session, the CAT Runtime Environment shall send a SET UP EVENT LIST system 
proactive command, if at least one event is registered by a selectable Toolkit Applet. 

During a CAT session the CAT Runtime Environment shall send a SET UP EVENT LIST system proactive command 
whenever the registered event list is changed. 

6.7.1 .3 POLL INTERVAL and POLLING OFF 

At the beginning of a CAT session, the CAT Runtime Environment shall send a POLL INTERVAL system proactive 
command, if at least one Toolkit Applet has requested a poll interval duration. 

During a CAT session the CAT Runtime Environment shall send a POLL INTERVAL or POLLING OFF system 
proactive command whenever the system poll interval duration is changed. 



7 Toolkit Applet 

7.1 Applet loading 

The UICC API card shall be compliant to the "Java Card''"*^ 2.2.1 Virtual Machine Specification" [2] and to annex B to 
guarantee interoperability at byte code Level. 

The applet loading mechanism and applet life cycle are defined in TS 102 226 [10]. The applet loading protocol is 
defined in TS 102 225 [9]. 



7.2 Data and function sharing 



The sharing mechanism defined in "Java Card^*^ 2.2.1 Application Programming Interface Specification" [2] and "Java 
Card^"^ 2.2.1 Runtime Environment Specification" [3] shall be used by the Toolkit Applet(s) to share data and function. 
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7.3 Package, applet and object deletion 

The Package and Applet deletion mechanism defined in "Java CardT"^ 2.2.1 Runtime Environment Specification" [3] 
shall be used to delete the content irom the UICC. The object deletion mechanism defined optional in 
"Java Card'"'^ 2.2.1 Application Programming Interface Specification" [2] is mandatory. 

If requested by an Applet, the object deletion shall start prior to the processing of the next APDU if no applet is running 
or suspended. This implies that it cannot be guaranteed that the object deletion has been performed prior to the next 
invocation of the Applet.process() method or ToolkitInterface.processToolkit() method. 

NOTE: The maximum work waiting time depends on several factors (e.g. the permissible duration of a 

network-UICC authentication); in some cases as little as 2 s could be required. During this period the 
UICC should respect the work waiting time procedure, defined in TS 102 221 [6]. 

8 UICC and ADF File System Administration API 

The file administration API consists of the uicc.access.fileadministration package, which allows applets to administrate 
file systems of the UICC. 

8.1 AdminFileView objects 

AdminFileView objects follow the behaviour of FileView objects and inherit FileView functionality. 

An AdminFileView object can be retrieved by invoking one of the getAdminFileView( ) methods defined in the 
AdminFileViewBuilder class. 

Each AdminFileView shall be given the access control privileges associated with the UICC or the corresponding ADF 
for the Applet. The access control privileges are defined by the administration domain parameters specified in 
TS 102 226 [10]. The access control privileges are checked against the access rules defined in TS 102 221 [6] each time 
a method of the AdminFileView object is invoked. 

8.2 AdminFileView operations 

The following functions are provided by the methods defined in the uicc.access.fileadministration. AdminFileView 
interface see annex A: 

• CREATE FILE as defined in TS 102 222 [8]. Creation of an ADF at the API level is FES. 

• DELETE FILE as defined in TS 102 222 [8] . 

• RESIZE as defined in TS 102 222 [8]. 
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Annex A (normative): 
Java Card UICC API 



The source files for the Java Card UICC API (102241_Annex_A_Java.zip and 102241_Annex_A_HTML.zip) are 
contained in ts_102241v060401p0.zip, which accompanies the present document. 
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Annex B (normative): 

Java Card UICC API identifiers 



The export files for the uicc* package (102241_Annex_B_Export_Files.zip) are contained in ts_102241v060401p0.zip, 
which accompanies the present document. 

NOTE: See the "Java CardT^ 2.2.1 Virtual Machine Specification" [4]. 
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Annex C (normative): 

UICC API package version management 

Table C.l describes the relationship between each TS 102 241 specification version and its UICC API packages AID 
and Major, Minor versions defined in the export files. 

Table C.I 



TS 102 241 


uicc.access package 


uicc.toolkit package 


AID 


Major, 
Minor 


AID 


Major, 
Minor 




AO 00 GO GO G9 GO 05 FF FF FF FF 89 1 1 
GG 00 00 


1.0 


AO GG OG 00 09 00 05 FF FF FF FF 89 12 
00 GG GG 


1.G 



Table C.2 



TS 102 241 


uicc.system package 


AID 


Major, 
Minor 




AG 00 GO GG G9 GG 05 FF FF FF FF 89 13 
GG 00 00 


1.0 



Table C.3 



TS 102 241 


uicc.access.fileadministration package 


AID 


Major, 
Minor 




AG 00 GO GG G9 GO 05 FF FF FF FF 89 1 1 
G1 00 00 


1.0 



The package AID coding is defined in TS 101 220 [5]. The UICC API packages' AID are not modified by changes to 
Major or Minor Version. 

The Major Version shall be incremented if a change to the specification introduces byte code incompatibility with the 
previous version. 

The Minor Version shall be incremented if a change to the specification does not introduce byte code incompatibility 
with the previous version. 
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Annex D (informative): 
Menu order example 

The following examples are in consecutive order. 



D.1 State after initialization 



Position in Tooll<itRegistry IVIenu 
Entries'list 


Name 


SET UP IVIENU proactive command 



D.2 Some application installation later 



Position in ToolkitRegistry Menu 
Entries'list 


Name 


SET UP MENU proactive command 


1 


Legacyl 


Legacy 1 


2 


Legacy2 


Legacy2 


3 


LegacyS 


LegacyS 


4 


Legacy4 


Legacy4 



D.3 Installation of application A with position of menu 
entry set to 3 



Position in ToolkitRegistry Menu 
Entries'list 


Name 


SET UP MENU proactive command 


1 


Legacyl 


Legacyl 


2 


Legacy2 


Legacy2 


3 


A 


A 


4 


Legacy3 


Legacy3 


5 


Legacy4 


Legacy4 


NOTE: The indicated position 3 puslies the entries "Legacy3" and "Legacy4" one position 
down. 



D.4 Installation of application B with position of menu 
entry set to 3 



Position in ToolkitRegistry Menu 
Entries'list 



NOTE: 



Name 



Legacyl 



Legacy2 



B 



Legacy3 



Legacy4 



SET UP MENU proactive command 



Legacyl 



Legacy2 



B 



Legacy3 



Legacy4 



The indicated position 3 pushes also the previously installed Application A from 
position 3 one position down to the new position 4. 
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D.5 Installation of application C with position of menu 
entry set to 2 and 3 



D.5.1 


nsert at position 2 










Position in ToolkitRegistry lUlenu 
Entries'list 


Name 


SET UP MENU proactive command 






1 


Legacyl 


Legacyl 






2 


C1 


C1 






3 


Legacy2 


Legacy2 






4 


B 


B 






5 


A 


A 






6 


LegacyS 


LegacyS 






7 


Legacy4 


Legacy4 




D.5.2 


nsert at position 3 








Position in ToolkitRegistry Menu 
Entries'list 


Name 


SET UP MENU proactive command 






1 


Legacyl 


Legacyl 






2 


C1 


C1 






3 


C2 


C2 






4 


Legacy2 


Legacy2 






5 


B 


B 






6 


A 


A 






7 


LegacyS 


LegacyS 






8 


Legacy4 


Legacy4 












D.6 


Insta lation of app ication D with position of menu 
entry set to "00" 




Position in ToolkitRegistry Menu 
Entries'list 


Name 


SET UP MENU proactive command 






1 


Legacyl 


Legacyl 






2 


C1 


C1 






3 


C2 


C2 






4 


Legacy2 


Legacy2 






5 


B 


B 






6 


A 


A 






7 


LegacyS 


LegacyS 






8 


Legacy4 


Legacy4 






9 


D 


D 
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D.7 



Installation of application E with position of menu 
entry set to 20 



Position in ToolkitRegistry lUlenu 
Entries'list 


Name 


SET UP lUIENU proactive command 


1 


Legacyl 


Legacyl 


2 


C1 


C1 


3 


C2 


C2 


4 


Legacy2 


Legacy2 


5 


B 


B 


6 


A 


A 


7 


LegacyS 


LegacyS 


8 


Legacy4 


Legacy4 


9 


D 


D 


10 


E 


E 



D.8 



Disabling/Locking of application legacyl and 
application A with menu entries at position 1 
respectively 6 



Position in ToolkitRegistry Menu 
Entries'list 


Name 


SET UP MENU proactive command 


1 


Legacyl 


CI 


2 


CI 


C2 


3 


C2 


Legacy2 


4 


Legacy2 


B 


5 


B 


LegacyS 


6 


A 


Legacy4 


7 


LegacyS 


D 


8 


Legacy4 


E 


9 


D 




10 


E 





D.9 Re-enabling/Unlocking of application legacyl and 
application A with menu entries at position 1 
respectively 6 



Position in ToolkitRegistry Menu 
Entries'list 


Name 


SET UP MENU proactive command 


1 


Legacyl 


Legacyl 


2 


CI 


CI 


3 


C2 


C2 


4 


Legacy2 


Legacy2 


5 


B 


B 


6 


A 


A 


7 


LegacyS 


LegacyS 


8 


Legacy4 


Legacy4 


9 


D 


D 


10 


E 


E 



£75/ 



Release 6 



28 



ETSI TS 102 241 V6.4.1 (2005-04) 



D.1 Deletion of application A with menu entry at 
position 6 



Position in Tooll^itRegistry Menu 
Entries'list 


Name 


SET UP MENU proactive command 


1 


Legacyt 


Legacyl 


2 


C1 


C1 


3 


C2 


C2 


4 


Legacy2 


Legacy2 


5 


B 


B 


6 


LegacyS 


LegacyS 


7 


Legacy4 


Legacy4 


8 


D 


D 


9 


E 


E 


NOTE: Menu entries below menu position 6 are moved up one position. 
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Annex E (informative): 
Change history 
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